59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill's runtime requires a sensitive blockchain private key and downloads/executes a third‑party npm package (via npx) but the registry metadata does not declare those requirements and the SKILL.m...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1769695628394,
        "_id": "k972azthakw22h9gyxzzv39ng1805hnr",
        "changelog": "Initial public release of \"find-people\" skill.\n\n- Enables OSINT-powered research on individuals, including professional backgrounds and career timelines.\n- Supports due diligence, competitive intelligence, investor research, and credential verification.\n- Charges $0.15 USDC per request, processed via the x402 protocol on the Base network.\n- Configurable private key setup via environment variable or config file.\n- Provides error handling for payment, missing key, and timeout issues.\n- CLI script for querying and retrieving comprehensive AI-processed reports.",
        "changelogSource": "user",
        "createdAt": 1769695628394,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "TzannetosGiannis",
        "handle": "tzannetosgiannis",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/32258946?v=4",
        "kind": "user",
        "linkedUserId": "kn71zg947kmtxy0rxk0qxqt7zx804x0t"
    },
    "ownerHandle": "tzannetosgiannis",
    "skill": {
        "_creationTime": 1769695628394,
        "_id": "kd773nr19y49e9vxrbnswgc7gx804c2z",
        "badges": [],
        "createdAt": 1769695628394,
        "displayName": "Find People (x402)",
        "latestVersionId": "k972azthakw22h9gyxzzv39ng1805hnr",
        "ownerUserId": "kn71zg947kmtxy0rxk0qxqt7zx804x0t",
        "slug": "find-people",
        "stats": {
            "comments": 0,
            "downloads": 2088,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 5,
            "versions": 1
        },
        "summary": "Open Source Intelligence (OSINT) tool for researching individuals - professional backgrounds, career timelines, due diligence, competitive intelligence, and investor research. Use when users need to research people, verify credentials, or gather professional information. Costs $0.15 USDC per request via x402 protocol on Base network.",
        "tags": {
            "background-check": "k972azthakw22h9gyxzzv39ng1805hnr",
            "due-diligence": "k972azthakw22h9gyxzzv39ng1805hnr",
            "latest": "k972azthakw22h9gyxzzv39ng1805hnr",
            "linkedin": "k972azthakw22h9gyxzzv39ng1805hnr",
            "osint": "k972azthakw22h9gyxzzv39ng1805hnr",
            "people-search": "k972azthakw22h9gyxzzv39ng1805hnr",
            "research": "k972azthakw22h9gyxzzv39ng1805hnr",
            "x402": "k972azthakw22h9gyxzzv39ng1805hnr"
        },
        "updatedAt": 1772162019619
    }
}